CyBehave Heroes

Build a Security Champion network that works.

CyBehave Heroes applies behavioural science to recruit, train, and measure Security Champions - without requiring you or your Champions to be behavioural scientists. The platform translates the key frameworks and methods into guided workflows, giving you evidence-based precision at every stage of your programme.

Start free trial → View pricing
Your programme, your name
Don't call them Security Champions?
Security Ambassadors Cyber Guardians Security Advocates

Rename the role to match your culture. Heroes adapts every label across the platform - so it speaks your organisation's language.

Take the tour

Inside CyBehave Heroes

Nine screens from inside the platform - your programme, your Champions and the science behind both. Click any screen to expand.

heroes.cybehave.com
Your whole programme on one screen
KPIs that prove it is working
Watch security ripple across the org
Nudge, your AI behavioural guide
Interventions grounded in behavioural science
Champions report the risks others miss
Recognition that keeps people coming back
Keep the programme alive all year
The science is always a click away
At a glance

Your whole programme on one screen

Behaviour, culture and resilience scored side by side, each trending over twelve weeks. Leaders see where the programme stands without waiting for a quarterly report.

The Programme

Six stages. One programme.

A Champions programme is not a project with an end date - it is a continuous behavioural change effort. Heroes is a big platform, so it does not hand you everything on day one. Core tools are available from the start, and as your programme moves through six stages the platform recommends the right features at the right moment - each with its matching training modules - so nobody is overwhelmed. Your Programme Leader can override at any time, enabling or disabling any feature early or late.

Stage 1
Setup

Establishing foundations: secure executive sponsorship, define your org structure, recruit your first cohort, and run a baseline Champion Check-In.

Available from day oneCore toolkit: dashboard, tasks, Champion management, check-ins, priority behaviours, Intervention Designer, and reports.
  • Sponsor & stakeholder alignment
  • Org structure and Champion roles defined
  • First cohort recruited and onboarded
  • Baseline Champion Check-In captured
Stage 2
Launch 🚀

Going live: a visible programme rhythm takes shape, your first maturity baseline is captured, and Champion training begins in earnest.

Recommended at this stageEngagement calendar, maturity assessment, and the Training Academy.
  • Engagement calendar populated and shared
  • Maturity baseline assessed
  • Champions progressing through the Academy
  • Programme visible across the organisation
Stage 3
Embed

Bedding the programme in: a regular cadence of check-ins, first interventions running, Champions communicating and being recognised for it.

Recommended at this stageComms builder, recognition (leaderboard and badges), 360 feedback, Champion journeys, and the library.
  • Regular check-in cadence live
  • First COM-B interventions deployed
  • Champion journeys under way
  • Early engagement signals trending up
Stage 4
Mature

Scaling impact: your network is live and data signals are flowing - the point at which the deeper analytical tools start earning their keep.

Recommended at this stageTeam Pulse, Social Network Analysis, and the risk register.
  • Social Network Analysis mapping influence
  • Team Pulse coverage across the org
  • Risks reported, triaged, and tracked
  • Reliable change on at least one priority behaviour
Stage 5
Sustain

Holding gains: consistent engagement cadence, measurable behaviour change in the data, Champions designing their own interventions.

Recommended at this stageChampion of the Month - visible recognition to keep momentum going.
  • Consistent, sustainable engagement rhythm
  • Measurable behaviour change in the data
  • Champions self-designing interventions
  • Programme health score holding steady
Stage 6
Evolve

Continuous improvement: retiring what no longer works, A/B testing comms and interventions, exporting evidence to the board.

Full toolkit in playNothing new to switch on - every feature is now working together, tuned to your programme.
  • A/B testing of comms and interventions
  • Retire activities that no longer perform
  • Board-ready evidence exported on demand
  • Programme adapts to emerging risks

Nudge AI guidance and AI help with comms are always on, whatever the stage. When a feature is enabled, its matching Training Academy modules unlock with it - so Champions learn each tool exactly when they need it, not months before.

Platform Features

Everything your programme needs.

One platform for the full Champion lifecycle - from onboarding and training through to board-level reporting and programme maturity.

🔄

Champion Lifecycle Management

End-to-end management of every Champion, from the moment they are recommended through onboarding, active contribution, and a graceful offboarding.

🗼

Coverage Map & Heatmap

Visualise Champion coverage across divisions, departments, and geographies. The engagement heatmap shows activity across six dimensions with exportable reports so gaps are visible at a glance.

📊

Behavioural Heartbeat

Three times a year, Champions capture short outside-in feedback from their teams on security behaviours and maturity. Combined with monthly Champion check-ins, Behavioural Heartbeat gives you continuous visibility of your security culture - verifiable data to design, execute, and measure interventions.

📡

Threat Intelligence

Your security function writes intelligence in plain, non-technical language and tags it Technical, Operational, Strategic or Business. Champions subscribe to the categories that matter to their teams, then run briefing actions to make colleagues aware of a live threat. Human-authored, not an automated feed.

🧪

Intervention Designer

A guided five-step workflow to design Behaviour Change Wheel-aligned interventions. Diagnose COM-B deficits, select matched techniques, build weekly action plans, and measure impact.

🎓

Training Academy

A multi-module tiered curriculum covering behavioural science, communication psychology, critical thinking, and programme leadership. Role-specific paths with certificates and downloadable summaries.

🏆

Journeys, Tasks & Gamification

Assign behaviour change tasks from a curated library and link them to Champion development journeys. XP, five-tier progression, badges, a leaderboard, and Champion of the Month reward progress - evidence-based gamification that motivates without creating unhealthy competitive pressure.

💬

Community & Comms Builder

An internal Champion community feed and a behavioural comms builder with psychological safety analysis and specificity checking to help Champions communicate more effectively.

🤖

Nudge AI Guidance Assistant

Always-on behavioural guidance built into every page. Nudge helps Champions design interventions, supports Programme Teams in reading data, and guides every new user through the platform grounded in COM-B throughout.

⏱

20-30 Minutes a Week

Champions are volunteers with day jobs. Heroes is built around a 20-30 minute weekly rhythm - short tasks, bite-sized learning, and quick check-ins that fit around existing commitments. Sustainable engagement is how Champion programmes survive beyond year one.

Who does what.

Four roles, each with the right access for the job. Programme Leaders own strategy and governance, Programme Teams run the day-to-day, Security Teams triage risk and issue Threat Intelligence, and Champions do the behaviour-change work on the ground.

Capability ProgrammeLeader ProgrammeTeam SecurityTeam Champion 
Strategy, billing & settingsPlan, seats, SSO, published measure weights, feature toggles ✓ – – –
Champion management & lifecycleInvite, suspend, offboard, transfer, roster ✓ ✓ – –
Intervention Designer & Comms BuilderDesign, assign, retrospective, templates ✓ ✓ – ✓
Behavioural Heartbeat & check-insTeam Pulse, Champion Check-In, 360 feedback ✓ ✓ – ✓
Coverage Map & Programme analyticsCoverage and engagement gauges, wave history, reports ✓ ✓ Read –
Risk management & triageReport, register, dashboard, triage queue ✓ ✓ ✓ ✓
Threat Intelligence & briefingsAuthor, categorise, subscribe, brief teams ✓ ✓ ✓ Read
Journeys, tasks & gamificationXP, tiers, badges, leaderboard, Log Activity ✓ ✓ – ✓
Training Academy & LibraryModules, certificates, books and research ✓ ✓ ✓ ✓
Nudge AI guidanceChat, guided tours, context help ✓ ✓ – ✓
Submit Feature RequestInform our development roadmap ✓ ✓ – –
✓ Full access Read Read-only – Not available
Nudge AI

Your always-on behavioural guide.

Nudge is built into every corner of CyBehave Heroes. Grounded in the COM-B model and CyBehave research, it is a genuine behavioural guide available to Champions, Programme Teams, and Programme Leaders around the clock.

Intervention guidanceNudge helps Champions identify COM-B gaps in their team, suggests relevant techniques from the library, and guides them through building a practical intervention plan.
Programme intelligenceProgramme Teams can ask Nudge to interpret coverage gaps and recommend targeted actions grounded in real programme data. Nudge knows which wave is open and how old each reading is, so it will not narrate behaviour movement between publishes, will not describe a change smaller than measurement error as a change, and will not tell you one measure caused another.
Platform guidance and toursNew users are greeted with a guided tour. Every context help icon across the platform opens Nudge with a plain-language explanation of that feature.
Anonymous programme insightsProgramme Teams see aggregated, anonymised themes from champion guidance conversations, with no individual attribution.
Daily limits and controlsProgramme Leaders can configure daily message limits per role, enabling or disabling AI chat for Champions and Programme Team independently. Guided tours and context help are always available regardless of AI chat settings.
Nudge is AI-powered and may occasionally need adapting to your context. Always apply your own professional judgement. Conversations are used anonymously in aggregate form to improve the Nudge experience.
NUDGE
Included with every CyBehave Heroes subscription
Champion AI chat✓ Included
Guided tours & context help✓ Always on
Programme Team insights✓ Included
The Science

Behaviour change, not just awareness.

Most security culture programmes stop at awareness. Heroes uses the COM-B model and Behaviour Change Wheel to diagnose why people behave the way they do - then designs interventions that last.

These models are put to work through SHIELD, CyBehave's six-stage behavioural change framework built purely for cybersecurity. Every Heartbeat reading, task, and intervention in the platform maps back to a SHIELD stage and a COM-B component, ensuring your programme effort is always directed at the right lever.

Read the science → Explore SHIELD →
Capability

The physical and psychological ability to perform secure behaviours. Skills, knowledge, and the cognitive function to apply them under pressure.

Opportunity

The environment that makes secure behaviour the easy, default choice. Social norms, tools, processes, and the absence of unnecessary friction.

Motivation

The reflective intentions and automatic habits that drive secure behaviour. Incentives, beliefs, identity, and emotional responses to risk.

SHIELD runs Specify, Hypothesise, Intervene, Embed, Learn, and Diffuse as one continuous cycle, with sustainment engineered into every turn. Heroes is that cycle as working software: each stage has a home in the platform.

Specify

Define observable target behaviours during programme setup, prioritised by the risks that matter to your organisation.

Hypothesise

Champion Check-Ins and Team Pulse diagnose which COM-B component is holding a behaviour back.

Intervene

The Intervention Designer matches evidence-based techniques to the diagnosis before anything reaches delivery.

Embed

Champions carry interventions into their teams, backed by tasks, comms, and recognition in the flow of work.

Learn

Dashboards track behaviour and its drivers against baseline, so you know what worked and what to revisit.

Diffuse

Network analysis shows where Champion coverage is strong enough to scale what the evidence validated.

Threat Intelligence

Intelligence your people can actually act on.

Most threat intelligence never reaches the people who need it, because it is written for analysts. Heroes turns it into something a Champion can take to their team on a Tuesday morning.

Your security function writes each item in plain, non-technical language and assigns it a category. Champions choose the categories relevant to their teams, so they see what matters to them and not a firehose of everything. From there, a Champion can run a briefing action to make colleagues aware of the threat and what to do about it.

Security function led, not automated ingestion. Nothing is scraped from a feed and pushed out unread. A person in your security team decides what is worth your colleagues' attention and writes it for them, which is why it lands as guidance rather than noise.

Four categories, Champions choose
TechnicalVulnerabilities, malware and attack methods affecting the tools people use
OperationalLive campaigns and incidents that change how teams should work right now
StrategicLonger-running shifts in the threat landscape worth preparing for
BusinessThreats aimed at your sector, suppliers, customers or brand
1Security function writes and categorises
2Champions see their chosen categories
3Champion runs a briefing action
4Colleagues know what to watch for
Built for everyone

You do not need to be a behavioural scientist.

Heroes is designed so that anyone can run a world-class Champions programme out of the box - in plain, everyday language. But if you are a practitioner who wants the detail, it is all there waiting for you.

Default view

Plain language, by default

Every screen speaks in clear, everyday terms. Run check-ins, design interventions, and read your dashboards without ever needing to know the theory underneath. The platform does the behavioural science for you.

  • No jargon, no learning curve
  • Guidance written for busy volunteers
  • Ready to use from day one
Advanced view

Behavioural depth, on demand

Flip on Advanced view in your user profile and the platform surfaces the behavioural terminology, the models and research behind each feature, and exactly how every key metric is derived and weighted.

  • COM-B and Behaviour Change Wheel language throughout
  • The research and models behind each metric
  • How scores are derived and weighted, made transparent

Same model, two ways of reading it. Advanced view never changes how the platform behaves or what it measures - both views run on exactly the same behavioural model. It only changes how the information is presented to you. Switch back and forth in your profile whenever you like.

Social Network Analysis

Champion Networks that actually work

Effective Security Champions programmes are not about finding one heroic individual who gives presentations on password hygiene. They are about building a network of trusted peers across different roles, teams, and functions - each one positioned to influence the people around them in ways that a central security team never can.

Behavioural science tells us that people adopt behaviours because of social proof, trust, and peer modelling - not because of awareness presentations. Your Champions need to be embedded across your organisation, visible to different audiences, and credible in their own context.

Heroes' Social Network Analysis maps the real influence topology of your Champion network - identifying who is connecting teams, who is isolated, and where the programme is fragile before it becomes a problem.

Key Bridge Nodes
Champions who connect otherwise isolated teams. Losing them fragments the network - Heroes identifies them before engagement drops.
Influence Reach
Who is each Champion actually influencing? Mapped by connections, not assumed by job title.
At-Risk Detection
Champions showing declining engagement surface automatically, so programme leaders can intervene early - not after they have already disengaged.
Cluster Health
Understand whether your Champion coverage is concentrated in one area or genuinely distributed across the organisation.
Click a node to explore connections
Measurement

Three measures. Three separate sets of eyes.

Most platforms hand you three scores built from the same data - which is really one number shown three times. Heroes asks three different groups of people, so each score stands on its own and you can see how they relate rather than us deciding it for you. Behaviour comes from team members. The Champion Network score comes from your Champions. Programme Strength is rated by your Programme Lead and security team. Nothing is counted twice.

Behaviour survey · three a year
Team members are surveyed three times a year, not continuously. The Behaviour score below is from Wave 2 (2026), published on 3 April. The next survey opens on 1 August, and the score only changes once that survey has closed - so it will not drift between now and then.
Aug
next survey
Behaviour
Seen by colleagues
0/ 100
Last 3 surveys
Read 3 Apr · 6 weeks old +2 vs last survey · no real change yet Coverage 68%

Reported by 412 team members across 26 teams. Not your Champions, and not logins or clicks.

How often secure behaviour was actually seen happening, according to the people working right alongside it.

Champion Network
Like-for-like · monthly
0/ 100
Like-for-like · 12 months
Read 12 May · 6 days old +3.1 vs Apr · reliable Response 84%

Reported by 38 Champions who joined at different times. No logins or clicks are included.

How capable, well-connected and far-reaching your Champions are. Compared like-for-like, so recruiting new Champions does not drag the score down.

Programme Strength
Every quarter
0/ 100
Every quarter
Updated 1 Apr A scorecard, not a survey Scoring published in full

Assessed by your Programme Lead and 9 people from the security team, plus what was actually delivered.

How well set up the programme itself is - people, tools and delivery. It rates the effort going in, rather than the results coming out.

Because the three scores come from different people, we never fold one into another, and we never claim one caused another. A stronger programme leading to a stronger network, and a stronger network leading to better behaviour, is something you can watch for in your own data - not something we have baked into the maths. Every score exports to a spreadsheet and is ready for the board, always with the date it was taken and how many people it is based on.

And two things we deliberately keep out of the scores.

How much people use the platform tells you whether they turned up. It does not tell you whether anything actually changed. We still show it - clearly labelled - but we never let it near the three scores above.

Shown, but not scored
Engagement
74%

Did people turn up? Logins, tasks finished, training progress, emails opened. Handy for running the programme week to week, but it is not proof that anything changed - so it counts towards none of the three scores.

Shown, but not scored
Coverage
68%

How much of the org replied? When too few people answer, or a team disagrees too much to average fairly, we leave that team out and coverage drops. So a low number here is a signal to read the scores with care, not a hidden failure.

What we will not claim yet. After a few surveys we can tell a real change from normal wobble in your own numbers. Comparing your scores against other organisations needs data we simply do not have, so we do not pretend to. And proving the programme caused a change - rather than it happening anyway - takes a very specific kind of rollout. We are honest about where you are on that path rather than claiming more than the evidence supports.

Training Academy

A modular curriculum built in.

The Training Academy gives your team access to the scientific methods and frameworks that underpin the Heroes platform - without requiring anyone to become a behavioural scientist. Each module is short and focused, bringing the key concepts to life through practical examples relevant to your security programme. Every module ends with a downloadable summary you can print out and refer back to, so learning stays accessible long after the session is complete.

Champions, security teams, and programme leaders each see the modules relevant to their role - building a shared language and evidence-based approach across the programme without overwhelming anyone with theory.

Foundation

Core frameworks

COM-B and Behaviour Change Wheel foundations, dual-process theory (System 1 and 2), communication psychology, and critical thinking. Designed to be accessible to anyone - no prior scientific knowledge required.

Intermediate

Role-specific paths

Champion skills and team engagement, intervention design, programme management, measurement and evaluation, and social network analysis. Modules match each role's practical day-to-day needs.

Advanced

Strategic capability

Organisational culture and resistance to change, strategic reporting and programme maturity, and choice architecture. Each module includes a downloadable PDF summary to keep and refer back to.

Specialist Quests are available for Champions who want to go deeper - self-enrol in optional pathways like Trusted Advisor or Risk Reporter to earn unique badges and develop specialist skills.

CyBehave Book Library — included for all users. Every member of the programme gets free online access to three essential titles: Building a Cybersecurity Culture, Behavioural Change Playbook for Cybersecurity, and The Rise of the Security Champion. The books ground the programme in the same evidence base that underpins every feature of the platform.

User Roles

Built for every stakeholder.

Heroes gives each user exactly what they need - no more, no less. Four distinct roles with tailored access and purpose-built dashboards.

👑

Programme Leader

Full administrative control. Configure the platform, manage billing, set strategy, design interventions, and access all analytics and board reporting.

⚙

Programme Team

Manage Champions day-to-day. Run the Behavioural Heartbeat, assign tasks, build communications, design interventions, and monitor engagement across the network.

🔍

Security Team

Author and categorise Threat Intelligence for Champions. Read-only programme analytics, and contribute behavioural risk data to inform intervention design.

🛡

Champion

A personal portal to complete tasks, earn XP, progress through tiers, connect with peers, access training, and track your impact on your team's security culture.

Champion Lifecycle

Manage Champions end to end.

Champions come and go - some stay for years, others for a season - and that is entirely normal. Roles change, priorities shift, and people move on. Heroes helps you manage the full lifecycle of every Champion, from the moment they are recommended through to a graceful offboarding - so turnover becomes a planned, auditable workflow rather than a coverage emergency.

Stage 1

Recommend

A Programme Team or Security Team member spots the right person and puts them forward. The opportunity is captured before anyone is formally invited.

Stage 2

Invite

One click sends a signed invitation email. The Champion accepts, sets a password and MFA, and completes their baseline check-in and COM-B primer.

Stage 3

Onboard

Department, location and business unit are recorded, the Champion joins the Directory, and their first journeys and tasks are assigned.

Stage 4

Train

Role-specific Training Academy modules build capability - from COM-B foundations to intervention design - with quizzes, badges and certificates to evidence progress.

Stage 5

Contribute

The active life of a Champion - logging activity, progressing through tiers, running interventions, and shaping their team's security culture.

Stage 6

Pause or transfer

Leave of absence, secondment or role change? Suspend, reactivate or transfer in a click - with a coverage check so cover never drops silently.

Stage 7

Offboard

A graceful exit with a handover period. Open tasks move to review for reassignment, and the Champion is retained as alumni for 90 days.

Every move - new Champions, offboarding started, gone inactive, purged - rolls up into a single daily digest email, so Programme Leaders and Teams get one clear summary instead of a stream of point alerts.

New to Champions?

Why Security Champions?

Heroes is the platform - but the idea it serves is bigger. If Security Champions are new to you, start with why peer-led programmes change behaviour where top-down training cannot, and how to build a network from your first recruit.

Security Champions →

What Champions are, the role they play across people, process and technology, and why they are your most important security investment.

Building a Champions network →

A practical, staged journey for standing up a Champions programme - from identifying the right people to a self-sustaining network.

Ready to build your Champions programme?

28-day free trial. No credit card required. Full platform access from day one.

Start free trial → Talk to us about Enterprise